Sussmann, Michael A. (Perkins Coie) 


From: Sussmann, Michael A. (Perkins Coie) 

Sent: Thursday, October 13, 2016 3:43 PM 

To: Chan, Elvis M. (SF) (FBI) 

Cc: Rich, Patricia R. (SF) (FBI); Newell, Sean (NSD) (JMD); Hawkins, E. A. (WF) (FBI); Sills, 


Jonathan P. (OGC) (FBI); Hooper, Joseph M. (CYD) (FBI); Cheeks Il, James E. (CYD) 
(FBI); Milligan, Julissa L. (Perkins Coie) 


Subject: Re: Follow Up 


In theory, sure, but I’m checking to see if the data is with CrowdStrike now or at the DNC. 


[ll start a new email and put you directly in touch with CrowdStrike. 


Michael Sussmann | Perkins Coie LLP 
P: 202.654.6333 
www.perkinscoie.com/msussmann 


From: "Chan, Elvis M. (SF) (FBI}" <Elvis.Chan @ic.fbi.gov> 

Date: Thursday, October 13, 2016 at 2:55 PM 

To: Michael <msussmann @perkinscoie.com> 

Ce: "Rich, Patricia R. (SF) (FBI)" <Patricia.Rich @ic.fbi.gov>, "Newell, Sean (NSD) (JMD}" <Sean.Newell@usdoj.gov>, 
"Hawkins, E. A. (WF} (FBI)" <Adrian. Hawkins @ic.fbi.gov>, Jonathan Sills <Jonathan. Sills @ic.fbi.gov>, “Hooper, Joseph 
M. (CYD) (FBI)" <Joseph. Hooper@ic.fbi.gov>, "Cheeks ||, James E. (CYD) (FB!)" <James.Cheeks @ic.fbi.gov>, "Milligan, 


Julissa L. (WDC)}" <JMilligan@perkinscoie.com> 
Subject: RE: Follow Up 


Hi Michael, 


Do you believe DNC/DCCC would be amenable to letting FBI computer forensics personnel onsite to conduct the 
imaging? 


Regards, 
Elvis 


Elvis M. Chan 

Supervisory Special Agent 
Squad CY-1 

San Francisco Division 

Federal Bureau of Investigation 
Work: 415-553-7605 

Cell: P -6196 

E-mail: elvis.chan @ic.fbi.gov 


From: Sussmann, Michael A. (Perkins Coie) [mailto:MSussmann @perkinscoie.com] 
Sent: Thursday, October 13, 2016 10:58 AM 


To: Chan, Elvis M. (SF) (FBI) <Elvis.Chan @ic.fbi.gov> 


SCC_0000696 


No. 1:21-cr-00582-CRC (D.D.C.) DX-151_0001 


Cc: Rich, Patricia R. (SF) (FBI) <Patricia.Rich @ic.fbi.gov>; Newell, Sean (NSD) (JMD) <Sean.Newell@usdoj.gov>; 
Hawkins, E. A. (WF) (FBI) <Adrian. Hawkins @ic.fbi.gov>; Sills, Jonathan P. (OGC) (FBI) <Jonathan. Sills @ic.fbi.gov>; 


Hooper, Joseph M. (CYD) (FBI) <Joseph. Hooper@ic. fbi.gov>; Cheeks Il, James E. (CYD) (FBI) 
<James.Cheeks @ic.fbi.gov>; Milligan, Julissa L. (Perkins Coie) <JMilligan@perkinscoie.com> 
Subject: Re: Follow Up 


Elvis, 
Here’s the information from CrowdStrike: 


The images requested by the FBI are approx. 3.1 TB of data. Pulling, encrypting, and transferring the data, and 
shipping the drives will require approx. 10 hours of labor. plus associated expenses. 


Our clients are paying $375/hr = $3,750 in fees. 

Add approx $140 for the drive to which images will be transferred. 
Add shipping rates. 

And we’re looking at around $4,000.00 


(There are no legal feces from my firm incorporated into this estimate — it’s just the time, materials and 
incidental costs for CrowdStrike.) 


Please advise. 


Michael 


Michael Sussmann | Perkins Coie LLP 
P: 202.654.6333 
www.perkinscoie.com/msussmann 


From: "Chan, Elvis M. (SF) (FBI}" <Elvis.Chan @ic.fbi.gov> 

Date: Thursday, October 13, 2016 at 1:06 PM 

To: Michael <msussmann@perkinscoie.com>, "Rich, Patricia R. (SF) (FBI}" <Patricia.Rich @ic.fbi.gov>, "Newell, Sean 
(NSD) (JMD)" <Sean.Newell@usdoj.gov>, "Hawkins, E. A. (WF) (FBI)" <Adrian. Hawkins @ic.fbi.gov>, Jonathan Sills 
<Jonathan.Sills@ic.fbi.gov>, "Hooper, Joseph M. (CYD) (FBI)" <Joseph.Hooper@ic.fbi.gov>, "Cheeks II, James E. (CYD) 
(FBI)" <James.Cheeks @ic.fbi.gov> 


Ce: "Milligan, Julissa L. (WDC)" <JMilligan@perkinscoie.com> 
Subject: RE: Follow Up 


Michael, 


Can you let us know what the hourly rate/total cost would be? L need to follow up with FBLHQ. ‘Thanks. 


Regards, 
Elvis 


Elvis M. Chan 
Supervisory Special Agent 
Squad CY-1 

San Francisco Division 
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Federal Bureau of Investigation 
Work: 415-553-7605 


Cell: RD -6196 


E-mail: elvis.chan @ic.fbi.gov 


-------- Original message -------- 

From: "Sussmann, Michael A. (Perkins Coie)" <MSussmann@perkinscoie.com> 

Date: 10/12/2016 5:58 PM (GMT-08:00) 

To: "Rich, Patricia R. (SF) (FBI)" <Patricia.Rich@ic.fbi.gov>, "Newell, Sean (NSD) (JMD)" 
<Scan.Newcll@usdoj.gov>, "Hawkins, E. A. (WF) (FBI)" <Adrian.Hawkins@ic.fbi.gov>, "Chan, Elvis M. 
(SF) (FBI)" <Elvis.Chan @ic.fbi.gov> 


Ce: "Milligan, Julissa L. (Perkins Coie)" <JMilligan@perkinscoie.com> 
Subject: Re: Follow Up 


We already had the call, i.e., Adrian called me on Tuesday. 


CrowdStrike has estimated that it will take 10 hours of work to get the responsive information that it has. 
Would the FBI be able to reimburse the DNC and DCCC for those costs? 


Thanks. 


Michael Sussmann | Perkins Coie LLP 
P: 202.654.6333 
www.perkinscoie.com/msussmann 


From: "Rich, Patricia R. (SF) (FBI}" <Patricia. Rich @ic.fbi.gov> 
Date: Tuesday, October 11, 2016 at 6:11 PM 


To: "Newell, Sean (NSD) (JMD}" <Sean.Newell@usdoj.gov>, Michael <msussmann@perkinscoie.com>, "Hawkins, E. 
A. (WF} (FBI)" <Adrian. Hawkins @ic.fbi.gov> 

Ce: "Milligan, Julissa L. (WDC}" <JMilligan@perkinscoie.com>, "Chan, Elvis M. (SF) (FBI)" <Elvis.Chan@ic.fbi.gov>, 
Leigh Nichols <LNichols @perkinscoie.com> 

Subject: RE: Follow Up 


Anytime Thursday works for me. 
Thank you, 
Patricia 


From: Newell, Sean (NSD) [mailto:Sean. Newell@usdoj.gov] 

Sent: Tuesday, October 11, 2016 2:19 PM 

To: Sussmann, Michael A. (Perkins Coie) <MSussmann@perkinscoie.com>; Hawkins, E. A. (WF) (FBI) 
<Adrian. Hawkins @ic.fbi.gov> 

Cc: Milligan, Julissa L. (Perkins Coie) <JMilligan@perkinscoie.com>; Chan, Elvis M. (SF) (FBI) <Elvis.Chan @ic.fbi.gov>; 
Nichols, Leigh (Perkins Coie) <LNichols@perkinscoie.com>; Rich, Patricia R. (SF) (FBI} <Patricia. Rich @ic.fbi.gov> 
Subject: RE: Follow Up 


Looping in Patricia Rich from San Francisco. 


The afternoon is better for me. But, given what you say below, l'Il just let Leigh coordinate a time with Patricia and 
Adrian. |’llthen join if | am available. 


SCC_0000698 
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Sean 


From: Sussmann, Michael A. (Perkins Coie) [mailto: MSussmann@perkinscoie.com] 

Sent: Tuesday, October 11, 2016 12:55 PM 

To: Hawkins, E. A. (WF) (FBI); Newell, Sean (NSD) 

Cc: Milligan, Julissa L. (Perkins Coie); Chan, Elvis M. (SF) (FBI); Nichols, Leigh (Perkins Coie) 
Subject: Re: Follow Up 


Adrian, I’m free now until 3:00 pm. If that doesn’t work, since TIl be OOO tomorrow, please work with 
my assistant, Leigh, to set up a call. But this is not a big deal — just a status update — and I think I can 
easily relay it all to you. But your choice. 


Michael Sussmann | Perkins Coie LLP 
P: 202.654.6333 
www.perkinscoie.com/msussmann 


From: "Hawkins, E. A. (WF) (FBI}" <Adrian. Hawkins @ic.fbi.gov> 
Date: Tuesday, October 11, 2016 at 11:48 AM 
To: Michael <msussmann@perkinscoie.com>, "Newell, Sean (NSD) (JMD)" <Sean.Newell@usdoj.gov> 


Ce: "Milligan, Julissa L. (WDC}" <JMilligan@perkinscoie.com>, "Chan, Elvis M. (SF) (FBI)" <Elvis.Chan @ic.fbi.gov> 
Subject: RE: Follow Up 


I'm checking with SF on their availability. 


-------- Original message -------- 

From: "Sussmann, Michael A. (Perkins Coie)" <MSussmann@perkinscoie.com> 

Date: 10/11/2016 11:17 AM (GMT-05:00) 

To: "Newell, Sean (NSD) (JMD)" <Sean.Newell@usdoj.gov>, "Hawkins, E. A. (WF) (FBI)" 
<Adrian.Hawkins@ic.fbi.gov> 


Ce: "Milligan, Julissa L. (Perkins Coie)" <JMilligan@perkinscoie.com> 

Subject: Re: Follow Up 

Sean and Adrian, 

Can you two get on a short call today with Julissa and me to discuss the status of your requests? We also 
can just get on the phone with Adrian. I will be OOO tomorrow, so if today doesn’t work, let’s shoot for 
Thursday. 

Thanks, 

Michael 

Michael Sussmann | Perkins Coie LLP 


P: 202.654.6333 
www.perkinscoie.com/msussmann 
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From: "Newell, Sean (NSD)" <Sean. Newell@usdoj.gov> 

Date: Tuesday, October 4, 2016 at 10:09 AM 

To: Michael <msussmann@perkinscoie.com> 

Ce: "Lai, Sarah (NSD)" <Sarah.Lai3 @usdoj.gov>, "Shih, Jeffrey (USACAN)" <Jeffrey.Shih@usdoj.gov>, "Chan, Elvis M. 
(SF) (FBI)" <Elvis.Cchan@ic.fbi.gov>, “Hawkins, E. A. (WF) (FBI)" <Adrian. Hawkins@ic.fbi.gov>, "Milligan, Julissa L. 


(WDC)" <JMilligan@perkinscoie.com> 
Subject: RE: Follow Up 


Sounds good. Thank you! 


From: Sussmann, Michael A. (Perkins Coie) [mailto: MSussmann@perkinscoie.com] 
Sent: Monday, October 03, 2016 11:13 PM 


To: Newell, Sean (NSD) 

Cc: Lai, Sarah (NSD); Shih, Jeffrey (USACAN); Chan, Elvis M. (SF) (FBI); Hawkins, E. A. (WF) (FBI); Milligan, Julissa L. 
(Perkins Coie) 

Subject: Re: Follow Up 


Sean, 


We certainly can share information with you on a rolling basis. We hope to have some information for 
you later in the week. 


Regards, 


Michael 


Michael Sussmann Perkins Coie LLP 
P: 202.654.6333 
www. perkinscoie.com/msussmann 


From: "Newell, Sean (NSD}" <Sean.Newell@usdoj.gov> 

Date: Monday, October 3, 2016 at 12:13 PM 

To: Michael <msussmann @perkinscoie.com> 

Ce: "Lai, Sarah (NSD)" <Sarah.Lai3 @usdoj.gov>, "Shih, Jeffrey (USACAN)" <Jeffrey.Shih@usdoj.gov>, "Chan, Elvis M. 
(SF) (FBI}" <Elvis.Chan@ic.fbi.gov>, "Hawkins, E. A. (WF) (FBI)" <Adrian. Hawkins @ic.fbi.gov>, "Milligan, Julissa L. 
(WDC)" <JMilligan@perkinscoie.com> 

Subject: RE: Follow Up 


Michael and Julissa, 

Good morning. | see that there may be another release of documents this week, maybe as early as tomorrow. 
Accordingly, | thought | would take that as an opportunity to check in on the first requests below. Would it be 
possible to do a rolling production? Happy to discuss further, if necessary. 


Thanks! 


Sean 
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From: Newell, Sean (NSD) 

Sent: Tuesday, September 27, 2016 6:14 PM 

To: MSussmann@perkinscoie.com 

Cc: Lai, Sarah (NSD); Shih, Jeffrey (USACAN) (Jeffrey.Shih@usdoj.gov); Chan, Elvis M. (SF) (FBI) (Elvis.Chan@ic.fbi.gov); 


Hawkins, E. A. (WF) (FBI) (Adrian. Hawkins@ic.fbi.gov) 
Subject: Follow Up 


Michael, 


As discussed yesterday, | am writing to request an initial batch of items from your clients. For all victims, DOJ and FBI 
request the following: 


1. Any released files that are believed to be fake or modified and, if applicable, the original, unmodified file; and 
2. 24-36 released files that were not circulated outside each of victim organizations (e.g., the donor list that was 
mentioned during our meeting) and a preliminary indication as to whether any of these may have been modified. 


For DCCC only, we request access to data and/or employees that could speak to the two screenshots at the bottom 
of this e-mail as having been created from an amalgamation of files or directories on the DCCC network. We believe 
that DCCC and/or Crowdstrike may have looked into these screenshots between on or about September 2 and 6, 
2016. 


Finally, as Sarah mentioned during the meeting, some media reporting referred to an ongoing DNC effort to review 
documents to see if any had been “forged.” To close the loop on that, we pulled up the following from a USA Today 
article regarding the September 13, 2016 information release: “In response to that most recent leak, DNC interim 
chair Donna Brazile stated that their ‘legal team is now in the process of reviewing these private documents, and 
attempting to confirm their authenticity, as it is common for Russian hackers to forge documents.’” 


We'll provide the more comprehensive wish list by the end of the week. 
Thank you. 

Sean Newell 

Deputy Chief — Cyber 

Counterintelligence and Export Control Section 

National Security Division 


U.S. Department of Justice 
(202) 532-4585 


Screenshot 1 
<< OLE Object: Picture (Device Independent Bitmap) >> 


Screenshot 2 
<< OLE Object: Picture (Device Independent Bitmap) >> 
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